Feed aggregator

Show HN: Uruky (EU-based Kagi alternative) now has Image Search and URL Rewrites

Hacker News - 16 hours 52 min ago

You can get a 2h free trial by solving a proof-of-work captcha when topping up your account for the first time.

If you'd like to learn more, an independent interview was posted a couple of weeks ago [1], and the FAQ [2] has a lot of information as well.

For the source code sharing, we've talked with lawyers and are inclined to no longer require the NDA/NCC for privacy reasons shared with us before (signing requires identification), but instead use a source-available permissive license that doesn't allow competition, like PolyForm Shield [3] (we do still have about 6 months before finalising a decision, here).

This does come with a lot more risks for us (it's harder to track down if someone publishes the code or uses it against the license), but given we've already passed 100 monthly active accounts, we're feeling more confident it's an acceptable risk.

The plan is to give logged in accounts (who are 12 months old or more) a way to download a ZIP of the current code base that's in the server.

Obviously there's no easy way to prove that's the case, but we're open to ideas/suggestions if someone here has them.

[1]: https://theprivacydad.com/interview-with-the-engineer-of-uru...

[2]: https://uruky.com/faq

[3]: https://polyformproject.org/licenses/shield/1.0.0

Comments URL: https://news.ycombinator.com/item?id=48396004

Points: 2

# Comments: 0

Categories: Hacker News

Cisco Warns of Available PoC for Critical Unified CM Vulnerability

Security Week - 17 hours 4 min ago

The high-severity flaw can be exploited remotely, without authentication, in server-side request forgery (SSRF) attacks.

The post Cisco Warns of Available PoC for Critical Unified CM Vulnerability appeared first on SecurityWeek.

Categories: SecurityWeek

VS Code Vulnerability Allows One-Click GitHub Token Theft

Security Week - 17 hours 33 min ago

A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance.

The post VS Code Vulnerability Allows One-Click GitHub Token Theft appeared first on SecurityWeek.

Categories: SecurityWeek

What to Write

Hacker News - 17 hours 40 min ago
Categories: Hacker News

Pages